Malicious code in nudela-aahaf0gf-gafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 719c6ebdce81f4edc3f79105f7d5183ab0a1b04226331d79ddcfde7622118a8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-poke57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a0e782cc702856ccfa1ddf892aed3e3b748c76bc09b758c9845d644c20b6df1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siregar-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d75ee4d520eb9dc65b3b700e6fc3aca926694284f03eb5a20b234864abf1c38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-148722

Malicious code in tealove-aruma34 npm...

Malicious code in uarg-mtuhai-suf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f3187a482936e79a3bfaa696d9bb5b09158d02fc9020ac1dc7f0f1d786d2717 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muhayu-taia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 418d0ac3b0ed14ed5f7d57d0eaef8857ac76a7fd7ac90b7fcf8981ea2c24ddf3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rita-38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4d47a128f71f628e3d7917bce8d4a10721f53b1af821d0564434f29f18b9b20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokiraifiagne-asai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a75e3bb26905e6344c820d51fa28b0083f3326ff8af82b74950bb0b862303c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilal-poke82 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d381cbb5f0fc5877ff8f5ad2b2dd85dee6b1f4e613185627a11ae3968a13266 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namala69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48121a92bca23952347604e76623568efd9ba3c104b44be52184aaf5c35f566e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/fhddd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfdfd383b67beeeac637995a9a8122fc774b6ce257fba26f03a4ba8cf674ffb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-namakai33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd7a14bc186a01ae13c48c618fc5db44b99f99064e64bf80b3f9a61d83f89b76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in technical-alonbio-toli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3ff8558c3aa01d54422862d8e610da5b40ec57f36455ee5fc58a455a5df3a5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rino-poke60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da39b81a63834f9ebd182114263a5c8bd13f17ab9adfd92424d768d92e5be1f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehah-cof-braew (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f729409d9bec70d406bdb1baff81a41a46c074fd5a824149bb8360f5713c30c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cinta-62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bcd636a261d212129275a49dd602623d45fbb31d2ba96313b1b23015e6234b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudalea-fofiri-agomoio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb0285d3fba14cdbd1d171124a1039ecd40ca758cef6cb3500079be4e423117f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-sekiya30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f63651315633df79734a0aaa19ad6aba138fbed61b87bb1b89a70314b62e8072 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0777f156eb79b8ffa1eaccd4dbdfd83077430c81a130e7a0c5acf6e5a148065b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abeh-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76558d63b5260f87c983c22e898b60e7ad327d5ccd11c631d14eb92dacab8900 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...